As network forensic investigators, sometimes we encounter rogue devices in a building or on a floor. It is important to find these devices, as they may contain vital information about the attacker and the attack itself. Wi-Fi is no exception. Say that we have a rogue access point running in the network. As forensic investigators, let's try to find the location of the device. We will make use of some scripts to accomplish this. Remember the PWR field in the airodump-ng tool? We need to develop something like that to poll the networks continuously. For this purpose, let's write the following Python 2.7 script:
#!/usr/bin/env python
# Author: Nipun Jaswal
from prettytable import PrettyTable
import operator
import subprocess
import os
import math
import re
import schedule
import time
def sniffer():
# iwlist command to scan all the Access Points
proc...
